seahaven-org-baseline/lib/hcptf-bootstrap
Adam Moussa 5ed57abfd7
fix(iam): pin HCP boundary ARNs and bootstrap trust window (PLAT-143)
Null on iam:PermissionsBoundary accepted any ceiling, including AdministratorAccess. Import apply cannot self-mutate hcptf-* while bootstrap trust is iam-bootstrap only; add a time-boxed exact StringEquals workspace grant instead of StringLike.
2026-09-02 11:19:04 -04:00
..
apply-policy.json.tmpl fix(iam): pin HCP boundary ARNs and bootstrap trust window (PLAT-143) 2026-09-02 11:19:04 -04:00
plan-refresh-policy.json.tmpl feat(iam): lock app-owned HCP IAM and add bootstrap SCP (PLAT-143) 2026-09-02 10:57:11 -04:00
scoped-apply-iam.json.tmpl fix(iam): pin HCP boundary ARNs and bootstrap trust window (PLAT-143) 2026-09-02 11:19:04 -04:00
trust-apply.json.tmpl feat(iam): lock app-owned HCP IAM and add bootstrap SCP (PLAT-143) 2026-09-02 10:57:11 -04:00
trust-plan.json.tmpl feat(iam): lock app-owned HCP IAM and add bootstrap SCP (PLAT-143) 2026-09-02 10:57:11 -04:00